1bc8f64fa4e19da2bc7d722058be2937_JaffaCakes118

General

Target

1bc8f64fa4e19da2bc7d722058be2937_JaffaCakes118
Size

292KB
MD5

1bc8f64fa4e19da2bc7d722058be2937
SHA1

372bf91871bac7256ac9cefb42f7078ebc4a934b
SHA256

2e543d19102520ef66d10d832399238ae2b2128beb180b3ba6c2f5ebef74be91
SHA512

f35d881892399b7e4f672c09802500a99b0eae52168935810bf5df5d9035db97a2f8e598ed8f136f58cfb1f56fb578d25e47656dbe4a9e340fbd6b1da5771dcb
SSDEEP

6144:Ym5CbJncNZxY7GDH11LqEIIbbIJooqB+uJoN2IWKVRkiai:t5Cu3PqEBXIzqB+FNzlF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc8f64fa4e19da2bc7d722058be2937_JaffaCakes118

Files

1bc8f64fa4e19da2bc7d722058be2937_JaffaCakes118
.exe windows:4 windows x86 arch:x86

b737bc5ff32e023eddad683664650547

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDialog
ShowOwnedPopups
DeferWindowPos
IsWindowVisible
CloseWindow
GetWindowTextLengthA
GetDlgItemInt
IsWindowUnicode
EnumThreadWindows
GetSysColor
SetDlgItemTextA
SetWindowPos
GetWindowTextA

ole32

CoTaskMemRealloc
OleCreateEmbeddingHelper
CoLockObjectExternal
FreePropVariantArray
GetHGlobalFromILockBytes
CoIsOle1Class
CreateDataCache
OleQueryCreateFromData
OleSetMenuDescriptor
OleFlushClipboard
OleRegGetUserType
CoGetTreatAsClass
OleSetClipboard
OleNoteObjectVisible

kernel32

LocalHandle
GetModuleHandleA
SuspendThread
CloseHandle
SetEvent
ResumeThread
VirtualAlloc
GetExitCodeThread
OpenEventA
OpenMutexA
ReleaseMutex
ResetEvent
GetProcAddress
IsBadReadPtr
HeapFree
HeapLock
GetStringTypeW
GetSystemDefaultLangID
GetStartupInfoA
IsValidCodePage
IsBadCodePtr
GetSystemDefaultLCID
LocalFree
OpenSemaphoreA
VirtualFree

msvcrt

exit
_exit
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
_XcptFilter

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 275KB - Virtual size: 379KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b737bc5ff32e023eddad683664650547

Headers

File Characteristics

Imports

user32

ole32

kernel32

msvcrt

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 275KB - Virtual size: 379KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 275KB - Virtual size: 379KB

.rsrc
Size: 3KB - Virtual size: 2KB